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(57) Abstract 

The invention relates to a system by which external users (35, 36), such as subscribers and service providers, can update their 
service data in a secure and controlled manner on a self-service basis in an intelligent network or other telecommumcahons ne^ork A" 
access system (SMAP) separate from the actual telecommunications services managing network elements (CCB, HLR, SMP/SMb, 5>CP) is 
implemented in the invention, said access system providing the customers and service providers with an open interface to these network 
elements through a public data network. The access system (SMAP) controls access to the actual network elements by, for examp e, 
authenticating the party requesting access, checking whether the requesting party is associated with the data he/she desires to manipulate, 
and/or checking to which processing operations the requesting party is entitled. The users can thus access their own service data in the 
network elements managing the data in a manner controlled by the access system (SMAP) 
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System for processing service data in telecommunications 

SYSTEM 

The invention relates to processing of telecommunications service 
data in a telecommunications network, particularly in an intelligent network. 

In order to make the following description easier to understand, 
some terms used below will be defined first. A customer and a subscriber de- 
note a person or a community that purchases a (intelligent network) service 
and uses it. A service provider or user denotes a person or a community that 
creates the service according to the requirements of the customer or the sub- 
scriber. An operator denotes a person or a community that operates a tele- 
communications network. A manufacturer denotes a person or a community 
that manufactures the hardware and software by means of which the operator 
or service provider creates the (intelligent network) service. 

In telecommunications networks, intelligence relates to the ability to 
access stored data, process it and make decisions on the basis of it. Present 
telecommunications networks, such as public switched telephone networks 
(PSTN), are intelligent to some extent since they are able to process stored 
data in connection with routing a call, for instance. A typical "intelligent" facility 
or service in the present telecommunications networks is a conditional call 
forwarding, which requires analysis of the call state and routing of the call on- 
ward according to the stored service profile of the call forwarding. Depending 
on the telecommunications system, these facilities and subscriber service pro- 
files associated with them have been maintained in different network ele- 
ments, such as subscriber databases in mobile communications networks. 

However, intelligent facilities of this type have been an integral part 
of the primary network, whereby to alter the facilities or to increase the number 
of them has required, for instance, software updating in every network ex- 
change. This is the reason for developing an intelligent network (IN). The intel- 
ligent network is a network architecture connected to the primary network, 
enabling faster, easier and more flexible service implementation and service 
control. This is performed by transferring the service control from the tele- 
phone exchange to a separate functional unit of the intelligent network. The 
services thus become independent of the primary network operation, and the 
primary network structure and software do not have to be changed when 
services are altered or added. In addition to the actual network operator, an 
intelligent network may comprise several service providers. 
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The intelligent network architecture can be applied to most tele- 
communications networks, such as public switched telephone networks 
(PSTN), packet switched public data networks (PSPDN) and integrated serv- 
ices digital networks (ISDN) and broadband-ISDNs (B-ISDN). Independently of 

5 the network technology, the purpose of the intelligent network architecture is to 
facilitate the creation, control and management of new teleservices. 

In fixed networks, intelligent network standardization has pro- 
gressed rapidly in recent years. For example, the CCITT Q.1290 and prETS 
300 374-1, Intelligent Network Capability Set 1 (CS1) are specifications related 

10 to intelligent networks. These standards define a certain functional and hierar- 
chical model for the intelligent network. Figure 1 illustrates the principle of the 
intelligent network and some of its components. The intelligent network also 
comprises other functional or physical units, which are not, however, signifi- 
cant as far as the present invention is concerned. 

15 In the intelligent network model, service control has been trans- 

ferred from the exchange of the primary network (SW) to a service control 
point (SCP) in the intelligent network. The SCP comprises the required data- 
base and service logic programs (SLP), in other words the software to provide 
the logic structure of a particular service (service logic). A service switching 

20 point (SSP) is an exchange, for instance a primary network exchange (SW) 
fulfilling the service switching function (SSF), in other words the identification 
of the intelligence network service and the triggering of interaction with the 
service control point (SCP). Figure 1 also shows the subscriber equipment 
(SE) of the primary network. 

25 The functions related to the intelligent network service management 

are described below. 

A service data point (SDP) comprises customer and network data 
used while performing a service. Functionally, the SDP comprises a service 
data function (SDF). It comprises data used by the service logic programs for 

30 providing individual services. The SCP or SMP/SMS has direct access to the 
SDP. 

The service management point (SMP) or the service management 
system (SMS) performs service management control, service provision control 
and service deployment control. Examples of its functions are database man- 
35 agement, network testing, network traffic management and network data col- 
lection. Functionally, the SMP comprises a service management function 
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(SMF) and optionally, a service management access function (SMAF) and a 
service creation environment function (SCEF). 

The service creation environment (SCEP) is employed to define, 
develop and test an intelligent network service and to input it to the SMP. 
5 Functionally, it comprises a service creation environment function (SCEF). The 
SCEP may interact directly with the SMP. 

The service management access point (SMAP) provides some se- 
lected users, such as service managers and customers, with a connection to 
the SMP. Functionally, the SMAP comprises a service management access 
10 function (SMAF). The SMAP interacts directly with the SMP. 

Subscription service data of intelligent networks has previously 
been managed through the customer data systems of the operator, or through 
the SMAP or by terminals or work stations connected directly to the SMP or 
the SMS of the intelligent network, such as work stations WS1 and WS2 in 
15 Figure 1. International PCT Applications W09211724, WO9325035 and 
WO94051 1 1 , for instance, disclose examples of this sort of implementation. 

With an increase in the use of the intelligent network services, the 
need for frequent updating of service related data has also increased. This has 
led to a growing load on the operator personnel and customer care systems 
20 when prior art solutions are employed. A need has thus arisen to allow exter- 
nal users, such as subscribers and service providers, to update their service 
data on a self-service basis. The prior art solutions are, however, unsuitable 
for this mainly for reasons of security, capacity and human resources. 

It is an object of the invention to provide the users and customers 
25 with the ability to input, view and update their service related data in a secure 
and controlled manner. 

It is a further object of the invention to provide, within a manage- 
ment access system, the operators with an open interface enabling different 
service management and billing systems to be added flexibly. 
30 This is achieved by a system for processing service data in network 

elements managing the telecommunications services of the telecommunica- 
tions network. The system is characterized in that 

the system is connected to one or several network elements man- 
aging the telecommunications services, 
35 the system comprises an open protocol interface to a public data 

network, through which the customers and service providers are able to selec- 
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tively access their service data in the telecommunications network. 

The invention provides an access system separate from the actual 
network elements managing the telecommunications services, said system 
providing the customers and service providers with an open interface to these 
5 network elements through a public data network. Controlled by the access 
system of the invention, they can access their service data through this open 
interface in network elements managing the data. The access system of the 
invention and an interface open to use provide the customers and service pro- 
viders with an opportunity to access their service data and process it on a 

10 normal computer and through a public data network. Special terminals em- 
ployed in prior art solutions can thus be avoided and the self-service function 
of service data modification and updating can be extended to apply to an al- 
most unlimited number of customers or service providers. However, the ac- 
cess system of the invention is always between the customer and the actual 

15 network managing the service data; it is impossible to establish a direct and 
uncontrolled connection. The access system is arranged to control the access 
to the actual network elements by for example authenticating the party re- 
questing access, by verifying whether the requesting party is associated with 
the data the party wants to manipulate, and/or by verifying to which processing 

20 operations the requesting party is entitled. A typical implementation is that an 
operator has access to all data, a service provider has access to the data of its 
customers and finally, a customer has access merely to his/her own data. 
Many other solutions may be used additionally or alternatively in order to en- 
sure security. 

25 In a preferred embodiment of the invention a user interface is im- 

plemented by WWW technique in a WWW server providing the customers and 
service providers with access to their service data by means of an ordinary 
WWW browser. This interface is the preferred choice when large amounts of 
data, such as numbering plans and routing lists, is updated. 

30 ln_gnnther embodiment-oU he inventio n the acc ess system fur- 

ther comprises interact ive voice re sponse a p paratus which is connected to the 
exchang e of the tel ec ommunications network to provide the customers with an 
interface through which they have access to their service data in the teJemro- 
munications network by mean s of a fixed or mobile_sub .sjgjjJaexJteaiiiDaLThe 

35 voice response apparatus can, for example, provide a customer with voice 
prompt menus to which the customer is requested to response by dual tone 
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multi-frequency responses generated from a subscriber terminal keyboard. 
The voice response apparatus can subsequently receive the dual tone multi- 
frequency response of the customer and deliver the response in the desired 
form to at least one said networ k element mana ging-telecommunications-^ 
5 services, \fhis interface is preferred for updating limited amounts of data, such 
f^~~as whenservice features are activated/deactivated, or when choices are made; 
I between screening lists and routing alternatives, etr^ — = — 

— " In the preferred embodiment of the invention the access system 

further comprises a high-level generic interface between the access system 
10 applications and the network elements managing the telecommunications 
services and optionally between customer care and billing systems of the op- 
erators. This interface is here referred to as a service management interface 
(SMI). In the present invention this SMI canJ>e_employed by a WWW applica- 
tion in a WWW server and an interactive voice response application in an in- 
15 teractive voice response unit in order to provide access to the SMP database 
or other corresponding element. In the preferred embodiment of the invention, 
the data transfer architecturej)yj3rjl]^ 

solution BajsecTon^^ This 
architecture allows the applications to commu nicate with each other ind e- 

20 ^)elidl3nlly~o^^ has designed them. This archi- 

^ture^proviides a rou^rFb^is~fbrd^n, distributed environments that are 
base^"or7sta ndards.,jnd_are capable of growjng^sjthe operator's require- 
rnejTtsJncjease ,—-»—- 

The present invention enables service data modification on a self- 

25 service basis, which diminishes the load on operator personnel and customer 
care systems. 

An advantage of the invention is that the network elements manag- 
ing service data require a minimum number of changes when a new service is 
introduced in the network, since service related data can be inputted and up- 
30 dated through the access system of the invention. The invention will be de- 
scribed in the following by means of the preferred embodiments with reference 
to the accompanying drawings, in which 

Figure 1 shows a block diagram of the intelligent network architec- 
ture, 

35 Figure 2 illustrates the basic principle of the access system of the 

invention, 
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Figure 3 shows the access system of the preferred embodiment of 
the invention. 

In principle, the present invention can be applied in any telecom- 
munications system whatsoever when external users, such as service produc- 
5 ers, service subscribers and service users, are to be provided with access to 
their own service data in a telecommunications system. The most typical em- 
bodiment of the invention is in conjunction with the service management point 
(SMP), in other words service management system (SMS) of an intelligent 
network. 

10 Alternatively or simultaneously, access can also be provided to 

network elements managing service data of other telecommunications sys- 
tems, such as the subscriber registers of mobile networks. 

Figure 2 illustrates the architecture of the access system of the in- 
vention, in the following referred to as the service management access point 

15 (SMAP), in connection with an intelligent network. In accordance with the ba- 
sic idea of the invention, the SMAP provides service providers or customers 21 
with access to the service data of the service management point (SMP) 
through a public telephone network, such as the PSTN or the ISDN, a cellular 
radio network (such as the GSM) or a public data network (X.25, the Internet) 

20 22 and an open interface. Furthermore, the service data of the customer care 
and billing (CCB) and the service data of the service control point (SCP) can 
be further processed through the internal service management interface (SMI) 
of the access system. Furthermore, the SMAP can provide access to a net- 
work element of another telecommunications network, such as the home loca- 

25 tion register (HLR) comprising data related to telecommunications services. 
The dotted line in Figure 2 represents the border between the equipment of 
the intelligent network operator and the outside world. 

The system of Figure 2 could be used in the following manner, for 
example. A new subscriber and the services he/she wants to subscribe to are 

30 first supplied to the CCB system. This can be performed by the computer 21 of 
the service provider through a public (data) network 22 and the SMAP access 
system of the invention and the service management interface (SMI). This can 
also be performed locally through a work station or the like in connection with 
the CCB. It is necessary to supply the subscriber information to the billing 

35 system (CCB) in order to be able to charge for the services later on. The CCB 
extracts the user and service identification information and employs this infor- 
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mation to register the subscriber and subscriptions in the service management 
point (SMP). The subscriber, in other words the customer, is now able to input 
his/her own service related data through the SMAP of the invention by using a 
personal computer (PC) or a subscriber terminal of a fixed telephone network 
5 or mobile network. The subscriber can also use the terminal of a fixed or mo- 
bile network to activate services or choose between some alternatives, for ex- 
ample. 

Figure 3 illustrates in greater detail the SMAP network architecture 
of the invention and also shows some SMAP network elements and their inter- 

10 connections. This preferred embodiment of the invention is here shown as 
adapted to an intelligent network and the GSM mobile system. 

In Figure 3, the SMAP network elements are the following. A LAN 
access server 30 is a normal LAN server providing access from a public data 
network (such as X.25) to the local network LAN31 of the operator. 

1 5 The SMAP WWW server is a network element connected to a LAN 

31, in which element is run a WWW server application providing the user with 
access to service data through a graphical user interface using a normal 
WWW browser. The SMAP WWW application comprises an HTML based in- 
terface enabling interaction through a WWW server 32 and the SMI to service 

20 data stored on the SMP or other network element. This user interface is the 
preferred choice when large amounts of data, such as screening lists, num- 
bering plans and time-dependent routing lists are updated. The server 32 may 
be a UNIX server from the Hewlett-Packard 9000 series, for instance. 

In the LAN network 31 there is preferably a screening router 33 

25 between the access server 30 and the WWW server 32. The purpose of the 
router 33 is to prevent all non-HTTP type traffic from accessing the WWW 
server 32. The advantage in this is that the SMAP system can be attacked (an 
unauthorized access, for instance) only by HTTP traffic using a WWW 
browser, for instance. All traffic of another type is unsuitable for breaking into 

30 the system. 

It is to be noted that although WWW technology is employed in the 
SMAP architecture in Figure 3, this does not mean that connecting the SMAP 
to the Internet itself is compulsory. For security reasons, the operator may 
prefer an intranet approach, whereby the SMAP can be connected to the op- 

35 orator's own intranet. 

It is also to be noted that the access server 30 may already exist in 
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the LAN network of the operator. Alternatively, the access server 30 can be 
implemented as a part of an existing network element. For example the Nokia 
Datacommunications Server (DaCS), which can be integrated into the Nokia 
mobile exchange DX200 MSC may operate as the server 30. Moreover, there 
5 are many products from other manufacturers available for fixed and cellular 
networks. 

In the LAN network 31, between the SMP/SMS and the WWW 
server 32 there is a firewall 37 preventing unauthorized access to SMP data. 
The firewall 37 can be implemented by an DEC Alpha UNIX server, for in- 
10 stance. The firewall 37 provides the highest security level. It can be config- 
ured to allow merely application specific traffic. It mediates traffic between a 
public and private network in such a manner that only reliable traffic can enter 
the private local area network. The firewall 37 changes the IP addresses of the 
data communication packets in such a manner that the hosts and customers 
are unaware of the true source address of each packet. In order to detect at- 
tempted fraud, the firewall is also able to log every attempt to access the SMP. 

An interactive voice response unit (IVR) 34 produces an interactive 
voice response interface which enables the users to interact with the SMAP 
system by means of voice prompts and dual tone multi-frequency (DTMF) re- 
20 sponses. As has been illustrated in Figure 3, th e interactive voice respons e 
unit is connected to a GSM mobile excha nge (MSC) on an ISUP interface 
through a signalling system 7 (Sls7yiFis to be noted, however, that the SMAP 
architecture is designed for both fixed and cejjujaj_^ 
thus also be rep laced b y a fixed network exchange., A SMAP user can use a 
25 fixed network t erminal eq ui pment , such as a PSTN terminal .e quipment 35. or 
a mobile station, such as a GSM terminal eq uipment 36. in order to setj jpa 
connect ion Jo the interactive voic e response unit_3 iLThis is performed in such 
a manner, for example, that the terminal equipment 35 or 36 calls a certain 
directory number which directs the call to the mobile exchange (MSC), which 
30 in turn switches the call related signalling to the interactive voice response unit 
34. When the call is switched to the interactive voice response unit 34, it 
guides the user by voice prompts, which are in the form of a menu, for exam- 
ple, whereby the user can make the desired choice by using the keys of the 
terminal equipment 35 or 36 in making an appropriate DTMF response. The 
35 interactive voice response unit 34 receives and detects the DTMF response 
and converts it to a form understood by the SMI. This user interface can be 
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employed when limited amounts of data are updated, for example when serv- 
ice features are activated or deactivated, a choice is made between screening 
lists or routing alternatives, etc. 

The data transfer architecture between the interactive voice re- 
5 sponse unit 34 and the WWW server 32 and the SMP/SMS is a distributed 
customer/server solution based on common object request broker architecture 
(CORBA). CORBA is an architecture defining the object management group. 
Simply stated, CORBA allows applications to communicate with each other 
independently of where they are located or who has designed them. This ar- 
10 chitecture provides a rough basis to open, distributed environments based on 
standards and capable of growing as the requirements of the operator in- 
crease. 

The cornerstone of the SMAP architecture of the preferred em- 
bodiment of the invention is the service management interface (SMI). The SMI 

15 is a high-level generic interface providing external applications, such as the 
CCB system, with access to the SMP database. The commercially available 
Nokia IN/SMS products comprise the service management interface. In the 
present invention, this SMI is employed by the WWW application in the WWW 
server 32 and the IVR application in the interactive voice response unit 34 and 

20 the customer care and billing system (CCB) in order to obtain access to the 
SMP database. 

The graphical user interface portion (the WWW application) of the 
SMAP architecture is implemented by using normal WWW technology in the 
server 32. A user can thus access his/her data on the SMP using a normal 

25 WWW browser on his/her personal computer (PC). The graphical user inter- 
face consists of a set of WWW pages provided in HTML source format. This 
provides the operator with flexibility to customize the input/output forms using 
standard HTML language. The operator can, for example, add and modify the 
pictures and textual parts on the pages. The operator can also choose what 

30 information is shown to the user and remove and add data fields related to the 
intellectual network subscriber data. The server 32 communicates with the 
SMP/SMS through the SMI using an object request broker (ORB) customer 
application. The SMP/SMS communicates through the SMI using an ORB 
server application. 

35 Similarly, the interactive voice response unit 34 communicates with 

the SMP/SMS through the SMI using an ORB customer application. 
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The telecommunications protocol employed between the different 
components of the SMAP architecture of the invention preferably TCP/IP. 

When external users are allowed access to service and subscriber 
data in an intelligent network, special attention must be paid to the security 
5 aspects of the system. In the preferred embodiment of the invention shown in 
Figure 3, the first security level is provided by the manner in which data is 
stored and accessed. Critical data in the system (in other words the service 
and subscriber database) is entirely located in the service management point 
(SMP) of the intelligent network. The data is not replicated to any other SMAP 
10 architecture element. No external user can obtain direct access to the SMP. 
Instead, the SMP is accessed through an intermediate server, either a WWW 
server 32 or the IVR server 34. 

The next security level is provided by particular security network 
elements, such as the screening router 33 and the firewall 37. 
15 The WWW server 32 and the interactive voice response unit 34 

preferably also perform user authentication based on checking the user ID, 
password and authority to access. The interactive voice response unit 34 can 
also support the authentication based on a calling line ID or a MSISDN num- 
ber. 

20 Furthermore, encryption can be employed between the WWW 

browser on the user equipment and the WWW server 32. 

In addition, application based security control can be employed on 
the SMI. Every request supplied either from the WWW server 32 or the inter- 
active voice response unit 34 is checked in SMP/SMS by the ORB server. It is 

25 thus ensured that the user is authorized to perform the operation. The opera- 
tion is checked preferably in two manners: Every user profile comprises a defi- 
nition of the operations allowed for the users related to this particular profile. 
The other checking mechanism ensures that the user is associated with the 
data he/she attempts to manipulate. Typically, a subscriber should be allowed 

30 to access the service data related to this particular subscriber, but he/she is 
not able to modify, for example, someone else's service data. 

In Figure 3, the SMAP of the invention is also connected to the sub- 
scriber database of a mobile network, in this case to a home location register 
(HLR). When the above CORBA architecture is employed, the HLR comprises 

35 an ORB server application with which the ORB customer of the WWW server 
32 or the interactive voice response unit 34 communicates through the SMI. 
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Subscriber data which can be processed in the HLR through the SMAP by the 
users are, for example, normal GSM network service data. The data to be 
processed can also comprise an intelligent network service trigger kept sub- 
scriber specifically in the HLR. The trigger and its usage are described in 
5 PCT/FI95/00601. 

In a similar manner as described above in connection with the HLR, 
any telecommunications network element in which access to existing data is to 
be allowed to external users can be connected to the SMAP system. It is also 
to be noted that even though the invention has been described above in con- 

10 nection with intelligent network services, the invention can also be applied to 
processing conventional telecommunications network service data independ- 
ently of the existence of an intelligent network. In the case in Figure 3, for ex- 
ample, the SMAP system of the invention could also be employed for proc- 
essing merely HLR service data. 

15 In other respects, too, the drawings and the description related to 

them are only meant to illustrate the present invention. As far as details are 
concerned, the access system of the invention can vary within the scope of the 
appended claims. 
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CLAIMS 

1. A system for processing service data in network elements (SMP, 
HLR) managing telecommunications services, characterized in that 

the system (SMAP) is connected to one or several network ele- 
5 ments (SMP, HLR) managing the telecommunications services, 

the system (SMAP) comprises an open protocol interface to a public 
data network (22) through which customers and service providers (21) are 
able to selectively access their service data in a telecommunications network. 

2. A system as claimed in claim ^characterized in that said 
10 open interface is implemented by WWW technique in a WWW server (32) pro- 
viding the customers and service providers with access to their service data by 
means of a WWW browser. 

3. A system as claimed in claim 1 or 2, characterized in that 
the system (SMAP) further comprises an interactive voice response unit (34) 

1 5 connected to an exchange (MSC) of a telecommunications network in order to 
provide the customers with an interface through which they have, by means of 
a fixed (35) or mobile (36) subscriber terminal, access to their own service 
data in the telecommunications network. 

4. A system as claimed in claim 3, characterized in that the 
20 voice response apparatus (34) is arranged to provide a customer with voice 

prompt menus to which the customer is recommended to response by dual 
tone multi-frequency responses made from the keyboard of the subscriber 
terminal (35, 36), and that the voice response apparatus (34) is arranged to 
receive the customer's dual tone multi-frequency response and deliver the re- 
25 sponse in the desired form to at least one said network element (SMP, HLR) 
managing the telecommunications services. 

5. A system as claimed in any one of the preceding claims, 
characterized in that the telecommunications network is associated 
with an intelligent network, and that said system (SMAP) is connected to the 

30 service management point (SMP) of the intelligent network. 

6. A system as claimed in any one of the preceding claims, 
characterized in that the telecommunications system is a mobile net- 
work, and that said system (SMAP) is connected to the subscriber database 
(HLR) of the mobile network. 
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7. A system as claimed in any one of the preceding claims, 
characterized in that between the system (SMAP) and at least one 
said network element (SMP, HLR) managing the telecommunications services 
there is another open interface (SMI). 
5 8. A system as claimed in claim 7, characterized in that said 

other open interface (SMI) is based on the common object request broker ar- 
chitecture (CORBA). 

9. A system as claimed in any one of the preceding claims, 
characterized in that the system (SMAP) comprises a filtering router 

10 (33) allowing only HTTP traffic to pass through to the WWW server 32. 

10. A system as claimed in any one of the preceding claims, 
characterized in that the system (SMAP) is arranged to authenticate a 
customer or service provider (21) requesting access to service data in at least 
one said network element (SMP, HLR). 

15 11. A system as claimed in claim 10, characterized in that 

the system (SMAP) is arranged to check whether the authenticated customer 
or service provider (21) is associated with the data he/she attempts to access. 

12. A system as claimed in claim 10 or 11, characterized in 
that the system (SMAP) is arranged to check to which service data processing 

20 operations the authenticated customer or service provider (21 ) is entitled. 
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